ROPGenerator - Tool That Helps You Building ROP Exploits By Finding And Chaining Gadgets Together

ROPGenerator is a tool that makes ROP exploits easy. It enables you to automatically find gadgets or build ROP chains. The current version supports x86 and x64 binaries.

Overview

ROPGenerator uses the tool ROPgadget (https://github.com/JonathanSalwan/ROPgadget) to extract gadgets from binaries and the barf-project (https://github.com/programa-stic/barf-project) to disassembly them. After gadgets are extracted, it analyzes them in order to compute their semantic and stores them according to their usefullness. Once the analysis is done, you can request ROPGenerator to automatically find gadgets or ROP chains by supplying semantic queries.

ROPGenerator is written in python. The tool has python2-only dependencies so it runs under python2 so far.

Please note that the current ROPGenerator version is still a beta under active development, therefore it might not work perfectly on some systems.

Why using ROPGenerator ?

Nice Command Line Interface : Enjoy a nice and smooth CLI with easy-to-use commands
Semantic gadget search : Find your gadgets quickly by only specifying the desired semantics
Gadget chaining engine : No suitable single gadget ? ROPGenerator will build ROP chains for you
Fully automated exploit building : ROPGenerator can build entire exploits... all by itself !

Installation

Install ROPGenerator
You can download the source and run

$ python setup.py install
$ ROPGenerator

Install Dependencies
ROPGenerator depends on ROPgadget, prompt_toolkit, enum, python-magic, pwntools and barf v0.4.0:

python-magic, enum, pwntoolsbarf v0.4.0, and prompt_toolkit packages will be added automaticaly during installation
ROPgadget will also be installed automatically if you don't have it already. However, the currently available package on pypi is not up-to-date. Therefore, it will be installed as "ROPgadget4ROPGenerator", a recent fork of ROPgadget.